Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

hello! is there a way to target policies on certain groups of hosts? for example, only run certain policies against sales and marketing but not developers?

I think the way to achieve this right now is to put different systems in different teams

I have suggested being able to target policies with a label, though

<@UALA3C5BM> have the free version so don't think that would apply to us unfortunately

the only other way I know is to craft your policies so it always returns a value (like "1") for systems you want to exclude from the policy

yeah think that is the only way as of now for us.

Yep, this is exactly what the Teams feature is for. Happy to put you in touch with sales if that could be interesting for you.